Commit graph

155 commits

Author SHA1 Message Date
RhodeCode Admin
0701d1fca5 tests(bad-data): fixed some pre python3 tests that no longer work exactly the same 2023-12-01 10:17:58 +01:00
RhodeCode Admin
6e5314f631 tests: refactor code to use a single test url generator 2023-10-04 19:36:19 +02:00
RhodeCode Admin
42301154fc copyrights: updated for 2023 2023-07-18 11:57:27 +02:00
RhodeCode Admin
bf561e5914 tests: fixed all tests for python3 BIG changes 2023-07-18 11:46:31 +02:00
RhodeCode Admin
c22758550a python3: fix urllib usage 2023-03-06 22:00:27 +01:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Marcin Kuzminski
ef0dad2905 grids: fixed tests and added one for permissions to repository group. 2019-12-20 18:27:24 +01:00
Marcin Kuzminski
442096cbde merge: merged default changes into new-ui 2019-04-19 13:21:58 +02:00
Marcin Kuzminski
5ac3be4f4e repository-groups: use lazy loaded admin dashboard 2019-04-03 23:15:02 +02:00
Marcin Kuzminski
2b19502b22 tests: fixed broken tests after UI chages 2019-04-01 21:04:06 +02:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00
Marcin Kuzminski
8d8e2802da core: use application wide detection of invalid bytes sent via URL/GET/POST data. 2018-10-24 12:29:11 +02:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
1d332c03ad pylons: fixed code and test suite after removal of pylons. 2017-11-16 18:27:09 +01:00
Marcin Kuzminski
9c110539e0 admin: ported settings controller to pyramid.
- NavList dropped pyramid flag as it's pure pyramid now
2017-11-09 15:40:31 +01:00
Marcin Kuzminski
116099638b apps: switch import of ADMIN_PREFIX from routing into base app.
- routing is deprecated and will be soon removed
2017-11-07 14:17:26 +01:00
Marcin Kuzminski
69a865a7a3 repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
Marcin Kuzminski
b505377197 users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid
- added new event data with added/removed/changed permissions
- cleanup code and spelling
2017-08-31 12:47:19 +02:00
Marcin Kuzminski
990994942d pull-requests: use close action with proper --close-commit solution.
- Mercurial settings are no long as LABS
- Unified some code between GIT and HG on rebase/close/delete feature branches
2017-08-24 22:36:34 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid.
- fixed few small found problems
- code cleanups
2017-08-11 13:00:47 +02:00
Marcin Kuzminski
17359c262c integrations: rewrote usage of pylons components inside integrations.
- added better auth decorators as used in other parts of the app
- fixed tests
- refactored the code to match other parts better (repo_route/repo_group_route)
2017-08-01 23:11:49 +02:00
Marcin Kuzminski
05386904e7 forks: moved pylons code into pyramid. 2017-08-01 11:48:16 +02:00
Marcin Kuzminski
3430eb74e5 repositories: ported repo_creating checks to pyramid.
- fixed security issues with resource discovery.
- ported repository creating check into base view for repos.
2017-07-28 15:56:06 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00
Marcin Kuzminski
eccdae6f25 tests: disable one test that fails because it was written in a wrong way.
- we'll re-enable it after migrating user groups to pyramid.
2017-07-27 11:39:56 +02:00
Marcin Kuzminski
b203d5f208 pull-requests: migrated code from pylons to pyramid 2017-07-27 11:30:55 +02:00
Marcin Kuzminski
93c5a7f9c5 compare: migrated code from pylons to pyramid views. 2017-07-26 13:28:45 +02:00
Marcin Kuzminski
8efc4d92c5 repo-commits: ported changeset code into pyramid views.
- refactored part of naming to use commit_id instead of revision
- renamed some parts to repo_commits instead of changeset without breaking backward compat
- small improvements and fixes for tests
2017-07-24 17:04:14 +02:00
Marcin Kuzminski
ff79205313 global-permissions: ported controller to pyramid view.
- fixed some other tests cases to rely on test routing
2017-07-20 15:04:36 +02:00
Marcin Kuzminski
c276174e89 journal: ported controller to pyramid code 2017-07-18 23:38:15 +02:00
Marcin Kuzminski
b2714a3c1d changelog: ported to pyramid views. 2017-07-18 00:07:43 +02:00
Marcin Kuzminski
53611d6f94 files: ported repository files controllers to pyramid views. 2017-07-17 14:20:22 +02:00
Marcin Kuzminski
580a0d0ea5 notifications: ported views to pyramid 2017-07-13 18:28:31 +02:00
Marcin Kuzminski
71071c0b26 dependencies: bumped pyramid to 1.9 webob to 1.7.3 and webtest to 2.0.27
- fixed some core tests for new webob/webtest
- changed core methods to make them more pyramid compat.
2017-07-12 22:54:14 +02:00
Marcin Kuzminski
93de470b3f tests: fixed few possible cases of detached instance errors. 2017-07-12 16:32:06 +02:00
Daniel Dourvaris
81fa857318 repo-feed: moved from pylons controller to pyramid views. 2017-07-09 10:25:14 +02:00
Daniel Dourvaris
f0ff4c5ce2 my-account: migrated left over controller functions into pyramid views.
- pull requests are now lazy loaded via dataGrid
2017-07-07 23:22:59 +02:00
Daniel Dourvaris
93b6dfba9a gists: migrated gists controller to pyramid view. 2017-07-07 12:05:30 +02:00
Marcin Lulek
cb6d81f435 security: escape flash messaged VCS errors to prevent XSS atacks. 2017-06-26 14:48:15 +02:00
Marcin Kuzminski
effa0f53ce users-admin: moved views into pyramid for editing emails and ips.
- added audit-logging
- added few additional tests
2017-06-20 13:53:44 +02:00
Marcin Kuzminski
214e9059ec my-account: moved few my account views into pyramid. 2017-06-20 00:11:36 +02:00
Marcin Lulek
e919908333 security: make sure the admin of repo can only delete comments which are from the same repo.
- fixes IDOR issue
- protects against other people comment deletion by repo admins.
2017-06-19 21:15:37 +02:00
Marcin Lulek
cc53162981 security: use 404 instead of 403 code on permission decorator to prevent resource discovery attacks. 2017-06-19 18:15:57 +02:00
Marcin Kuzminski
f442430df8 my-account: moved emails config into pyramid views. 2017-06-19 15:30:09 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application.
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Lulek
779587086e security: fixed self-xss inside file views. 2017-06-17 17:06:57 +02:00
Marcin Kuzminski
926a79e98e audit-logs: implemented pull request and comment events. 2017-06-17 15:22:50 +02:00
Marcin Kuzminski
5915f38fcf pull-request-api: updated logic of closing a PR via API call.
- consistent logic via web and API
- updated events
- updated proper close checks.
2017-06-13 00:14:21 +02:00